Vulnerability in Mullvad Wireguard.sys
CVE-2026-19380
A vulnerability was identified in Mullvad wireguard.sys 0.10.1. The affected element is the function AdapterState of the component IOCTL Handler. Such manipulation leads to improper update of reference count. Local access is required to ap…
CVSS v3 metric
CVSS v3 base score 2.3 (Low). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L.
Affected products
- Mullvad Wireguard.sys — versions 0.10.1
Weakness classification (CWE)
References
- cna@vuldb.com (technical-description, vdb-entry)
- cna@vuldb.com (signature, permissions-required)
- cna@vuldb.com (third-party-advisory)
- cna@vuldb.com (third-party-advisory)
- cna@vuldb.com (exploit)
Frequently asked questions
- What is CVE-2026-19380?
- CVE-2026-19380 is a low-severity vulnerability in Mullvad Wireguard.sys, classified under CWE-664. CVSS score: 2.3/10. Published 2026-08-10.
- How severe is CVE-2026-19380?
- Low severity. CVSS v3 base score is 2.3 out of 10.